Static task
static1
Behavioral task
behavioral1
Sample
0769aef4f79c5eeb9fea3d7b61a15db1_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
0769aef4f79c5eeb9fea3d7b61a15db1_JaffaCakes118
-
Size
149KB
-
MD5
0769aef4f79c5eeb9fea3d7b61a15db1
-
SHA1
40ae1c44d7a7deff57df8d52ef7d28e4129055c0
-
SHA256
42e98c3378e815a69478b31a8632666a7cb22be16b1d6cc857523b148b980581
-
SHA512
0cc1e218ab7cc55d5f3dacffe00c260bb00de4d7d2beb1c1579ffbc5bbafcb784bf3b81fb4361a8d001e5827094c94d237ca32c8fef233ec4fe42164966c4acf
-
SSDEEP
1536:W3UHeM7PnHX8gS4avu37GmOmHtwvtdqflZY3TuiG7jZeL4qeiavGHYsLyh:4iHXgVZKNwvtdCaW7leL4qloGj2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0769aef4f79c5eeb9fea3d7b61a15db1_JaffaCakes118
Files
-
0769aef4f79c5eeb9fea3d7b61a15db1_JaffaCakes118.exe windows:4 windows x86 arch:x86
6039c26165040db47e28057ca34786ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
memcmp
strcat
isdigit
isspace
memcpy
rename
memset
_EH_prolog
__CxxFrameHandler
strcmp
strncpy
strstr
strcpy
rand
abs
strlen
user32
MessageBoxA
wvsprintfA
kernel32
GetModuleHandleA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
GetTickCount
GetStartupInfoA
GetCommandLineA
ExitProcess
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ